<hostname>.ts.net should automagically work whenever tailscale is on. You might have to enable something.

If you want more specific, like sub domain names per service, you can set custom DNS records in tailscale to point to a caddy server which routes to the correct port. The caddy server doesn’t have to be the same machine as the service if its on the tailnet.

Getting https involved is a bit more tricky. You don’t need it because its all over wireguard already, but the browser doesn’t know that and will complain. I think official tailscale can distribute ssl certificates across your tailnet but if you’re using headscale you’ll either need to do that manually or buy a domain and have caddy auth for that domain.

The HOMES mnemonic is now SHAME.

(I’m sure some lib on bluesky figured this out before me)

The Gates Foundation had strong objections to releasing the covid-19 patents. I’m sure they had some sort of rationale that wasn’t "this would set a bad precedent for M$ patents.

Idk about the mega neckbeard for opensuse. Every one I’ve met has been the most normal and least annoying. It just works and allegedly has some very nice convienence features.

Also the arch user could just as easily be copied to nixos.

Mint is perfect for exactly that purpose. There’s a daunting marketplace of alternatives all with different specialties. Mint’s specialty is being as easy and newbie friendly as possible. Out of the box - it just works - etc.

The AUR with delayed official repos was precisely my issue with them. Then they put GUI helpers ontop of both pacman and the AUR which auto update and now you’ve got a real recipe for disaster.

Ubuntu will actively break itself via snapd at like 2am on a Sunday.

Fedora could not do a fully system update on a 1GB VPS because dnf would OOM.

The dumbest thing I’ve seen Arch do in over a decade of using it is put RabbitMQ in its official repos while also rolling the latest version of Erlang which RabbitMQ doesn’t support.

No and neither does Manjaro which is less stable than Arch in my experience.

SteamOS uses an immutable system with A/B partitions. One partition is live but read only. Updates apply to the other partition which is hidden. Which partition gets mounted is swapped on a reboot after an update.

Tell that to Valve.

A scraper has many more ways around something like sheildfont than just OCR. The question will be if it was actually programmed to check for such measures.

Netnut is indeed an Israeli company. I dont think they’re getting arrested and prosecuted in US courts but their entire infrastructure has been shut down and they’ve been cut off from the US. So the business itself is killed.

Resell access to your home IP address to undisclosed third parties? If they do I’d imagine they’d bother to put it in the terms of service.

It was pushed back down to panama before but it took half a century (1950-2000) to do it. All that effort undone by some kid named big balls.

“More easily configurable” would be more accurate, because there’s less things that could get in your way. The system is designed to make it as simple as possible from a developers perspective.

That wouldn’t have fixed the AUR incident because the attacker updated the PKGBUILD which is roughly the same as the nixfile. And there are no packages provided by the AUR, just PKGBUILDs. You always build the package yourself locally.

Official packages are already vetted so they don’t need user scoping. They could just enforce user scoping in the AUR and use the provides array for resolving conflicts. Its not a perfect solution but there’s no such thing as perfect security, just better security.

Also having an AUR helper that properly containerized the build step would be an even bigger improvement.

Arch is deliberately minimal making it a good base system in the same way Debian or Fedora is. It’s smaller, simpler, updates faster than the others and is far more configurable. It is however not built for the average user and most distros built on top of it that try to make it more “usable” are IMO pretty dangerous ideas. I think the only derivative i’ve tried that was good was SteamOS because they made it Atomic like nix or silverblue.

None of this really has to do with the AUR. That was always labelled as “use at your own risk”. And to their credit they caught and addressed the attack within a day of it happening. Still, hosting user PKGBUILDs and leaving it to individual users to audit them is not a secure solution, its just punting on the responsibility.

npm: Node Package Manager.
AUR: Arch User Repository.

Bazzite is based on fedora not Arch so you don’t need to worry.

“The idea behind silicon sampling is simple and tantalizing,” they write. “Because large language models can generate responses that emulate human answers, polling companies see an opportunity to use AI agents to simulate survey responses at a small fraction of the cost and time required for traditional polling.”

Somebody invested money into this company. And there’s at least hundreds, maybe thousands, of other businesses with these asinine ideas about how to use AI. They’re all getting capital from someone who’s supposed to be smart because they have capital. Remember that when llm providers cost correct token prices.